Draft: Implement field level and update privileges for practice lead and users endpoint

[ethanstrominger]

Dependencies

• Implement field configurable security for global admin, project admin, practice area lead, and team member #346
• Implement user record level permission for global admin, project admin, practice area lead, and team members #392

Overview

Users with PRACTICE LEAD PROJECT assignment can only update a user if they are assigned to the same practice area for the project. They also can potentially see fewer fields based on whether the user is in the same practice area.

Action Items

TBD

Resources/Instructions

Documentation or websites that can be helpful.